Project

General

Profile

Actions
Copy link

Feature #7481

closed

rules/actions: explicit action scopes

Added by Victor Julien 4 months ago. Updated 19 days ago.

Status:
Closed
Priority:
High
Assignee:
Victor Julien
Target version:
8.0.0-beta1
Effort:
Difficulty:
Label:

Description

Allow setting the scope of the applied action (packet or flow currently) explicitly in the rule.

Suggesting a syntax:

(drop|pass)[:(packet|flow)]

pass:flow tls any any -> any any (tls.sni; content:"suricata.io"; ... )

Related issues 1 (1 open — 0 closed)

Blocks Suricata - Story #7164: usecase: improve firewall usecaseNewVictor JulienActions
Actions
Copy link
 #1

Updated by Victor Julien 4 months ago

  • Target version changed from TBD to 8.0.0-beta1
Actions
Copy link
 #2

Updated by Victor Julien 4 months ago

  • Blocks Story #7164: usecase: improve firewall usecase added
Actions
Copy link
 #3

Updated by Victor Julien 4 months ago

  • Description updated (diff)
Actions
Copy link
 #4

Updated by Victor Julien about 2 months ago

  • Priority changed from Normal to High
Actions
Copy link
 #5

Updated by Victor Julien about 2 months ago

  • Status changed from New to In Progress
  • Assignee changed from OISF Dev to Victor Julien
Actions
Copy link
 #6

Updated by Victor Julien 19 days ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #7

Updated by Shivani Bhardwaj 19 days ago

  • Status changed from In Review to Closed
Actions
Copy link

Also available in: Atom PDF